Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Apache Tomcat — DSA-4673 Clear all filters
TI-2020-01862 CVE-2020-1938 · GHSA-c9hw-wf7x-jp9j

Improper privilege management in Apache Tomcat

Priority CRITICAL 100KEV

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9927 Published 2020-02-24 Partial fix · 9.0.31, 8.5.51 +1 CWE-269
TI-2020-01859 CVE-2020-1935 · GHSA-qxf4-chvg-4r8r

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header…

Priority MEDIUM 40

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.09386 Published 2020-02-24 Partial fix · 7.0.100, 8.5.51 +1 CWE-444